src.dualinventive.com/devops/ansible/rootnet-roles/di-sec-firewall/handlers/main.yml

---

- name: run firewall
  command: "{{ item }}"
  with_items:
    - "iptables -A INPUT -j ACCEPT -m conntrack --ctstate ESTABLISHED,RELATED"
    - "iptables -A OUTPUT -j ACCEPT -m conntrack --ctstate ESTABLISHED,RELATED"
    - "{{ firewall_binary }}"